PyPI/requests CVE-2024-47081: medium 5.3

Requests vulnerable to .netrc credentials leak via malicious URLs

Action: Upgrade requests to 2.32.4 or later.

pip install requests==2.32.4

Affected

Fixed versions

Sources

• osv: GHSA-9hjg-9r4m-mvj7
• https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7
• https://nvd.nist.gov/vuln/detail/CVE-2024-47081
• https://github.com/psf/requests/pull/6965
• https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef
• https://github.com/advisories/GHSA-9hjg-9r4m-mvj7
• https://github.com/psf/requests
• https://github.com/psf/requests/releases/tag/v2.32.4
• https://github.com/pypa/advisory-database/tree/main/vulns/requests/PYSEC-2026-1872.yaml
• https://pypi.org/project/requests
• https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env
• https://seclists.org/fulldisclosure/2025/Jun/2
• http://www.openwall.com/lists/oss-security/2025/06/03/11
• http://www.openwall.com/lists/oss-security/2025/06/03/9
• http://www.openwall.com/lists/oss-security/2025/06/04/1
• http://www.openwall.com/lists/oss-security/2025/06/04/6

CVE-2024-47081 · published 2025-06-09T19:06:08Z · modified 2026-10-19T20:00:04.716114530Z · JSON